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Abstract — Fault-tolerant quantum computation is a technique 
that is necessary to build a scalable quantum computer from 
noisy physical building blocks. Key for the implementation of 
fault-tolerant computations is the ability to perform a universal 
set of quantum gates that act on the code space of an underlying 
quantum code. To implement such a universal gate set fault- 
tolerantly is an expensive task in terms of physical operations, 
and any possible shortcut to save operations is potentially 
beneficial and might lead to a reduction in overhead for fault- 
tolerant computations. We show how the automorphism group 
of a quantum code can be used to implement some operators on 
the encoded quantum states in a fault-tolerant way by merely 
permuting the physical qubits. We derive conditions that a code 
has to satisfy in order to have a large group of operations that 
can be implemented transversally when combining transversal 
CNOT with automorphisms. We give several examples for quan- 
tum codes with large groups, including codes with parameters 
[8, 3, 3], [15, 7, 3], [22, 8, 4], and [31, 11, 5]. 

I. Introduction 

Quantum error-correcting codes (QECC) are essential in- 
gredients for the realization of quantum computing devices. 
In addition to the mere error correction, it is also important 
that quantum operations can be implemented in a fault-tolerant 
way, i. e., the operations preserve the code space and if an op- 
eration fails, the errors remain local |Q], [0. Several schemes 
are known for universal fault-tolerant quantum computing, 
including schemes that are based on distance-three codes 
(3] such as for instance the concatenated Steane code (4), 
0, concatenated error detecting codes [6|, or the Bacon- 
Shor codes [7|. Quite recently, the surface code — a stabilizer 
code that exhibits one of the highest reported thresholds that 
exceed 1% for a standard 2D lattice of physical qubits and 
independent depolarizing noise — has gained a lot of attention 
1 8 1, [9]. So far, most of the schemes for fault-tolerant quantum 
computing encode very few qubits per code block; in the 
case of concatenated codes, typically QECCs are chosen that 
encode only a single qubit per code block. 

In this paper we present a general method that allows the 
implementation of operations in a fault-tolerant manner for 
codes encoding several qubits. Like in the single-qubit case, 
CSS codes appear to be well suited for our methods, but 
they can be applied to any stabilizer code. The basic idea 
is that code automorphisms can give rise to non-trivial logical 
operations on the encoded quantum information that can be 
executed by merely permuting, or what arguably is simpler in 



a practical implementation, simply relabeling of the physical 
qubits. While such operations cannot per se give rise to a 
universal gate set for which additional techniques such as state 
distillation are essential, our construction can nevertheless lead 
to operations that can be performed at basically zero cost. 
This might lead to overhead reductions, in particular for fault- 
tolerant quantum computations on long block codes, provided 
they exhibit large automorphism groups or automorphism 
groups with suitable structure. 

II. CSS Codes and their Automorphism Group 

First we consider the special case of CSS codes based on a 
classical linear C — [n, which is contained in its dual 

code C = [n,n — ki,ds]. The (permutation) automorphism 
group Aut(C) of C is the set of all permutations it 6 S n that 
preserve the code, i.e., (see also [10]) 

Vce C: C 7 * = (c ff(1) ,...,c ff(n) ) G C. (1) 

It turns out that Aut(C) = Aut(C ± ). 

Lemma 1. Let B — {b\, . . . , fo„_2fc 1 , ■ • ■ , bn-fci } be a basis 
of C- 1 such that Bq = {b„_2fei , • • • > b n -ki } is a basis of C. 
With respect to the basis B, the automorphism group Aut(C) 
has a linear representation in the block-triangular form 



Aut(C) ->• GL(n- fci,2) 

7T I — ^ T(ir) 





r 2 (7r) 4 








(2) 



Recall that the basis states of the CSS code C = [n, k,dj, 
where k = n — 2k\, based on the code C are given by 



1 



\ c+v ^ 



(3) 



where the vectors v = X)j=i ft&i are representatives of the 
cosets of C in C . If we apply a permutation n £ Aut(C) 
to the qudits of a basis state of the CSS code, from eq. (O it 
follows that 



y 



\c+v') = |Vv>, 
(4) 



where 



v'=Y,P'J>i and p[ 



k 
3=1 



T^))if j r ( 5 ) 



Note that the basis state \ip v ) corresponds to the encoding of 
the computational basis state |/3). Hence we can label the basis 
states of the CSS code C by the vector (3 = . . . , p k ) T . 
Then we have 

W = |Ti(7r)/3), (6) 

i. e., the automorphism 7r of the classical code C gives rise 
to a permutation of the basis states of the CSS code C 
corresponding to the linear transformation T\(tt), In summary 
we have: 

Theorem 1. Let C be a CSS code based on the classical code 
C < C . Then the automorphism it G Aut(C) corresponds 
to the linear operation T\ (7r) defined in eq. (0 on the logical 
basis states of C. 

In the general situation, a CSS code C is based on nested 
classical codes C2 C Ci, and the basis states of C correspond 
to the cosets of C2 in C\. In general, the automorphism groups 
Aut(Ci) and Aut(C2) need not be equal. However, when we 
consider their intersection, we obtain the following result: 

Theorem 2. Let C be a CSS code based on nested classical 
codes C2 < C\. Then a joint automorphism n G Aut(Ci) H 
Aut(C2) corresponds to a linear operation Ti(tt) on the 
logical basis states of C, defined analogously to eq. (0. 

Note that these operations can be implemented by permuting 
the qubits or just by relabeling them. Below we will show 
that by a similar argument, the (permutation) automorphism 
group of an additive code corresponding to a stabilizer code 
gives rise to symplectic operations on the logical operators of 
the stabilizer code. We would also like to point out that while 
automorphism groups of additive codes have been investigated 
before, see e.g., ifTTI . Ifl2l . iTOl . the idea to leverage automor- 
phisms to perform large sets of encoded logical operations 
does not seem to have been investigated muchQ 

III. Combining Automorphisms and Transversal 
Operations 

For CSS codes, applying the controlled-NOT (CNOT) op- 
eration transversally is an operation preserving the space of 
two copies of the code. More precisely, we have 



CNOT®"(|V^}|^ 2 » = \ip Vl )\iJ> Vl+V2 ), 



(7) 



where CNOT®" should be understood as applying CNOT- 
gates to the corresponding qudits in both code blocks. In terms 
of the encoded basis states, we have 



CNOT®" (1/301/32)) = 1/31)1/3! + #,), 



(8) 



1 However, we would like to point out that the automorphism group of the 
quantum Hamming code of length 15 was used to aid fault-tolerant quantum 
computation in a talk given by J. Harrington at the QEC 201 1 conference. 



i. e., the transversal CNOT corresponds to the linear 2k x 2k 
matrix 




(9) 



In the following we assume that the CNOT-gates can not only 
be applied to the corresponding pairs of qudits in each code 
block, but between any pair of qudits. Then we can combine 
the operations on the code arising from the automorphism 
group of the underlying classical code and the transversal 
CNOT. 

Theorem 3. Given a CSS code C — [n. k,d\ derived from a 
linear code C < C with automorphism group Aut(C), one 
can realize the following group G12 of linear transformations 
on 2k encoded qudits in a fault-tolerant manner: 



G12 — 
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(10) 



7Ti,7r 2 e Aut(C)y . 

The first two generators of G12 are the transversal CNOT 
with all controls in the first or second code block, respectively. 
While we cannot make a general statement about the relation 
between the automorphism group Aut(C) and the group G12, 
we have the following observation. 

Lemma 2. The group G12 contains all matrices of the form 

and (^—J-j . ( n ) 

where A is an arbitrary element of the It-algebra generated 
by the matrices Ti(itj), i.e., 




A = 



^2 Oi„Ti(n), 

•n-SAut(C) 



q, G Z. 



(12) 



Hence we can in particular realize transformations of the form 
|/3i)|/3 2 ) -> |/3i)|A/3 1 +/3 2 ). (13) 
Proof: First, note that 

\ / \ — 1 

T \ I T. trA n \ 

(14) 




































The products of these matrices and their inverses yield ar- 
bitrary integer linear combinations of the matrices T\{-Kj) in 
the upper right block. The result for lower- triangular block 
matrices follows analogously. ■ 

Theorem 4. Assume that the group G12 contains all matrices 
of the form 





A ' 








A G M nxn (¥ q ) 



and 



(15) 








B 





: B e M nxn {¥ q 



where A, B £ M nxn (¥ q ) are arbitrary matrices of the algebra 
of n x n matrices over the field ¥ q . Then G\ 2 — SL2 n (F g ). 

Proof: Let Eij denote the n x n matrix which has 
the entry 1 in row i and column j, and is zero elsewhere. 
By assumption, the group G\ 2 contains the following two 
matrices: 













Mi = - T 1 ' 3 and M 2 













with i 7^ k. We compute 



M 2 " 1 M 1 M 2 Mf 1 



I + a(3E, t 



i . k 







(16) 



(17) 



By symmetry, we also get the same type of matrices in the 
lower right block, and in summary all elementary trans vections 
with identity on the diagonal and a single non-zero off- 
diagonal entry. Furthermore, for t^Owe obtain the following 
factorizations of diagonal matrices: 
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(18) 
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(19) 



The matrices of the form (fTFt and (fT9l l generate all diagonal 
matrices with unit determinant. Together with the transvections 
in ( TToT l and (1171 1. they generate the full special linear group 
SL 2 (F 9 ). " ^ ■ 



IV. Examples 

Good candidates for this construction are codes with large 
automorphism group or automorphism groups for which the 
representation given by Ti(tt) is irreducible or has only a 
few irreducible components of large dimension. Among those, 
Reed-Muller codes and cyclic codes are promising candidates. 



A. CSS code [15,7,3] 

The 4th-order binary Hamming code has parameters 

[15,11,3] and contains its dual code C = [15,4,8]. The 

automorphism group of C is isomorphic to the alternating 
group As of order 21600. 

The linear action on the 7 logical qubits is given by the 
group 



Gi 



(I 1 1 l\ 
110 10 
1110 111 
1 1 1 
10 10 1 
1 1 1 

\1 1 1 1 0/ 



(I 1 1 0\ 
111110 
110 1 

10 10 

1 1 
10 110 

1111 



1 

1 1 



\o 



(20) 



1/ 



Combining the group G± x G\ with the transversal CNOTs, 
we get the group G 12 = SL(12,2) x SL(2,2) with more 
than 2 144 elements. What is even more, the block-diagonal 
subgroup Gi of G12 that acts trivially on the second code 
block is isomorphic to the group SL(6, 2). 

A closer inspection shows that the Hamming code contains 
the all-one vector which corresponds to the logical operator 
X® 15 on the code. Both are invariant under permutations. 
Hence on the subcode [15,6,3] of the original code, which is 
obtained by removing the all-one vector from the Hamming 
code, we can realize the full linear group SL(6, 2) on the 
encoded states as well as the full linear group SL(12, 2) on 
pairs of encoded states. 

B. CSS code [31, 11,5] 

The BCH code with parameters [31,21,5] contains its dual 
G = [31,10,12]. The resulting CSS code has parameters 
C = [31,11,5]. The automorphism group of G is a group 
Gi of order 155 isomorphic to G31 x G5. However, when 
combining G\ x G\ with the transversal CNOTs, we obtain 
the group G 12 isomorphic to SL(10, 2) x SL(10, 2) x SL(2, 2) 
with more than 2 199 elements. Restricted to one code block, 
we get the group G\ = SL(5, 2) x SL(5, 2). Similar as for the 
CSS code [15, 7, 3], we find that the spaces of dimension 5, 
5, and 1 stabilized by the code correspond to cyclic subcodes 
lying between the code G and C . On each of the subspaces, 
we can realize the full linear group, despite the fact that the 
automorphism group Aut(G) is relatively small. 



G = 



C. CSS code [22,8,4] 

The classical self-orthogonal code C = [22, 7, 8] generated 

by 

/1000100001100010101010\ 
0100100001101001010111 
0010100001010011011000 
0001000100100001101011 
0000010101011111100010 
0000001100100110101100 

vooooooooiiiiiiiiiiiiiiy 

(21) 

is contained in its dual C 1 - = [22,15,4]. Hence we obtain 
a CSS code C = [22,8,4]. The automorphism group of C 
has order 336 and is isomorphic to a semi-direct product of 
PSL(2, 7) and Z^. Although the group is relatively small, the 
action on the space of 8 logical qubits is an irreducible matrix 
group 



representation of Aut(C): 



Gi 



(1 1 1 1 1 0\ 

111110 
01101101 

1 1 1 
10 10 110 
110 1110 1 
1 1 

\1 1 1 1 0/ 



(\ 1 1 l\ 
10 110 10 

10 10 11 
10 10 10 1 

1 1 1 1 
1110 110 1 
1 

\1 1 1 0/ 



(22) 



The matrices in G\ span the full space of binary 8x8 matrices. 
Hence by Theorem [4] combining the group G\ x G\ with 
the transversal CNOTs we get the maximal possible group 
SL(16,2). 

D. Stabilizer code [8,3,3] 

There is a stabilizer code C = [8, 3, 3] whose five generators 
of the stabilizer, the three logical A-operators, and the three 
logical Z-operators correspond to the following vectors (top 
to down, respectively) over GF(A): 
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(23) 



Here ui 6 GF{A) obeys the relation uj 2 = ul + 1, and Pauli 
matrices X, Y, and Z correspond to 1, uj 2 , and ui, respectively. 
The permutation automorphism group of C is isomorphic to 
the group AGL(1,8) of order 56. On the symplectic space 
of the logical operators of C, we have the following matrix 
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1 1 
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1 1 

V o i o 
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1 1 
10 0/ 
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Note that with this choice of logical operators, the space 
corresponding to the logical A-operators is preserved. 

Unlike the situation for CSS codes, the transversal CNOT- 
gate does not preserve stabilizer codes in general. So we have 
to look for stabilizer codes which have a larger symmetry 
group. Additionally, we may consider the automorphism group 
including local Clifford operations as well. 

V. Code Families 

We briefly discuss the situation for CSS codes based on 
Reed-Muller codes or cyclic codes. 

A. Reed-Muller codes 

Recall that the r-th order binary Reed-Muller code 
RM(r, m) of length n — 2 m , for < r < m is obtained 
by the evaluation of all Boolean functions in m variables 
of maximal degree r (see, e. g., iflOl ). The automorphism 
group of RM(r, m) contains the group AGL(m, 2) of all 
affine transformations on F™. As affine transformations pre- 
serve the degree of Boolean functions, it follows that the 
automorphism group also preserves the cosets of RM(r, m) 
in RM(r + l,m). Hence, if a CSS code is based on the 
nested codes RM(r, to) C RM(r + s, to), the action of 
AGL(m, 2) on the CSS code will not mix the blocks of logical 
qubits corresponding to homogeneous Boolean functions of 
fixed degree. Additional automorphisms or other techniques 
are needed to implement operations between the blocks. 

B. Cyclic codes 

Recall that every linear binary cyclic code of odd length n 
can be uniquely described by a generator polynomial g(X) 
that divides X n — 1. Given two nested cyclic codes Gi = 
[n, k2\ C C\ = [n,ki], their generator polynomials obey the 
relation 32(A) = gi(X)h(X), where h(X) is some factor 
of X n — 1 of degree k\ — &2. Assume that the polynomial 
h(X) has irreducible factors hi(X) of degree 6i, respectively. 
Then the coset space C\jCi can be decomposed into spaces 
of dimension 6i which are preserved by the action of the cyclic 
group Z n of order n. In turn, for a cyclic CSS code based on 
C2 C C\, the cyclic shift gives rise to operations on blocks 
with Si logical qubits. If n < 6f, the matrices corresponding 
to the action on these blocks do not generate the full algebra 
of Si x Si matrices. Hence we cannot apply Theorem |4] and it 
is not clear whether we can implement the full group of linear 
transformations on that block with Si logical qubits. Of course 
the situation changes when there are more automorphisms than 
just the cyclic shift. 



VI. Towards the full Clifford Group 

When the conditions in Theorem [4] are met, we can im- 
plement all linear transformations on a single block of k 
logical qudits as well as on any number of such blocks. Using 
tensor products of local X-operations corresponding to coset 
representatives v, we can implement affine shifts on the logical 
qudits, and hence all affine transformations. 

If a CSS code is based on a classical self-orthogonal 
code C < C , we can apply a local Fourier transformation 
transversally on all qudits, resulting in a simultaneous Fourier 
transformation on all logical qudits. This operation will inter- 
change the role of the logical X- and Z-operations. In order 
to implement all Clifford operations on the logical qudits, 
additional transformations that mix X- and Z-operations are 
required. 

If the CSS code is based on a doubly-even binary code, 
applying the local transformation P = diag(l,i), where i 2 = 
— 1, transversally induces an operation on the code states (|3) 
given by 

P®"hM=i wst( *W- (24) 

Hence depending on wgt(u) mod 4, different powers of P are 
applied to the corresponding logical state. The favorable situ- 
ation is when we indeed have a different action on the logical 
qubits. In that case, the combination with permutations of the 
logical qubits (which are in particular linear transformations) 
yields a larger group of transformations on the logical qudits. 
The very group, however, depends on the particular code. 

VII. Conclusions 

We proposed a general method that allows the implementa- 
tion of operations in a fault-tolerant manner for codes encoding 
several qubits. In Theorem |4] we presented a sufficient condi- 
tion on the automorphism group of a quantum code such that 
all linear transformations on the logical qubits can be imple- 
mented by permutations of the qubits and transversal CNOT 
operations. We applied this to a set of examples, including 
quantum codes with parameters [8, 3, 3], [15, 7, 3], [22, 8, 4J, 
and [31,11,5]. Furthermore, we discussed the prospects for 
applying this framework to infinite families of quantum block 
codes, such as the Reed-Muller codes and cyclic codes. 
There are several open questions that are implied by these 
observations: (i) Can we find more examples of quantum codes 
for which the complete set of linear transformations can be 
implemented following Theorem |4]? In particular, it would be 



interesting to know if code families with this property exist that 
are asymptotically good, (ii) Can we find codes — or families 
of codes — for which we can implement not only all linear 
transformations, but the full Clifford group on k logical qudits 
extending the results shown here? 
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